Cross-Site Request Forgery (CSRF) in yourls/yourls
CVE-2022-0088

3.5LOW

Key Information:

Vendor

Yourls

Status
Yourls/yourls
Vendor
CVE Published:
3 April 2022

What is CVE-2022-0088?

Cross-Site Request Forgery (CSRF) in GitHub repository yourls/yourls prior to 1.8.3.

Affected Version(s)

yourls/yourls < 1.8.3

References

https://huntr.dev/bounties/d01f0726-1a0f-4575-ae17-4b5319...
x_refsource_CONFIRM
https://github.com/yourls/yourls/commit/1de256d8694b0ec7d...
x_refsource_MISC

CVSS V3.1

Score:
3.5
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

CVSS V3.0

Score:
3.5
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.